topic Re: Breaking Gaia RADIUS Change in R81.10 T79? in Firewall and Security Management

Breaking Gaia RADIUS Change in R81.10 T79?

B_P — Wed, 23 Nov 2022 21:50:04 GMT

Anyone else use RADIUS to authenticate for GAIA and it broke after upgrading to Take 79? SmartConsole still works. Logs from RADIUS server says authorized, but Gaia says permission denied.

Tried fix related to PRJ-38144, PRHF-22814 just for kicks, but didn't help.

Re: Breaking Gaia RADIUS Change in R81.10 T79?

the_rock — Wed, 23 Nov 2022 22:40:04 GMT

I heard another customer had this issue and they rolled back to previous jumbo and worked fine again. Definitely seems like an issue with take 79.

Re: Breaking Gaia RADIUS Change in R81.10 T79?

JozkoMrkvicka — Thu, 24 Nov 2022 06:28:06 GMT

I am using Take 79 and RADIUS is working fine for me. But I didnt install any older Takes, only Take 79 on top of R81.10 (new deployment).

That said, are you able to uninstall any of previously installed Takes and install only Take 79 on R81.10 ? Maybe there is some conflict between different Takes...

Re: Breaking Gaia RADIUS Change in R81.10 T79?

_Val_ — Thu, 24 Nov 2022 07:38:42 GMT

Please take it with TAC

Re: Breaking Gaia RADIUS Change in R81.10 T79?

B_P — Mon, 28 Nov 2022 15:48:06 GMT

Curious, are you using RADIUS to authenticate Gaia administrators?

Re: Breaking Gaia RADIUS Change in R81.10 T79?

B_P — Mon, 28 Nov 2022 15:49:08 GMT

Val, I post on here so I can avoid talking to TAC.

Re: Breaking Gaia RADIUS Change in R81.10 T79?

_Val_ — Tue, 29 Nov 2022 12:42:37 GMT

Lol, I appreciate it, but sometimes we have to. If it is a bug, there is no other way.

Re: Breaking Gaia RADIUS Change in R81.10 T79?

Ambar — Thu, 01 Dec 2022 14:45:57 GMT

Hi,

Val is correct, the proper way is to open a ticket to TAC

As we’ve noticed your post we are looking into it and working on this in R&D

As a work around you can add a server or update one attribute and the RADIUS will return

Regardless a solution will be introduced in the coming jumbos

Re: Breaking Gaia RADIUS Change in R81.10 T79?

Supporto_Checkp — Thu, 01 Dec 2022 17:21:28 GMT

same issue on every cluster updated with Take 79...

it's looks like this jumbo "forget" the radius key .

try to remove the radius config and add it again and it will works
🙂

Re: Breaking Gaia RADIUS Change in R81.10 T79?

Nik_Bloemers — Fri, 02 Dec 2022 07:15:40 GMT

I can confirm, this also happens on management too (seen it on MDS and a dedicated SmartEvent server). Deleting the aaa radius-servers from CLISH and then re-adding them fixes it.

Re: Breaking Gaia RADIUS Change in R81.10 T79?

jgarcias — Tue, 20 Dec 2022 15:05:05 GMT

I've had a similar problem after upgrading to latest jumbo on R81.10. I think the problem could be the PSK got corrupted somewhere.... after configuring it again in the GAIA the RADIUS auth started working again. Did you try that? Also try to remove and re-add the RADIUS servers again if the PSK workaround didn't work

Re: Breaking Gaia RADIUS Change in R81.10 T79?

Ambar — Wed, 21 Dec 2022 09:36:45 GMT

Hi, I would like to update that a Jumbo containing a fix will be released in the coming one

Re: Breaking Gaia RADIUS Change in R81.10 T79?

dehaasm — Wed, 18 Jan 2023 08:35:42 GMT

Strange we have the same issue on all gateways and SMS upgraded to r81.10 take 81 was this already fixed or do we need to manually reconfigure the radius on all manually?

Re: Breaking Gaia RADIUS Change in R81.10 T79?

jgarcias — Wed, 18 Jan 2023 08:40:29 GMT

Try only to configure the preshared key again and check if that fixes the issue. It worked fine for me... I didn't have to reconfigure all regarding RADIUS, only the PSK

Re: Breaking Gaia RADIUS Change in R81.10 T79?

Tal_Paz-Fridman — Wed, 18 Jan 2023 08:41:23 GMT

According to the JHF documentation it was fixed in take 82:

Re: Breaking Gaia RADIUS Change in R81.10 T79?

Chris_Atkinson — Wed, 18 Jan 2023 11:14:58 GMT

The following was resolved in T82:

After an upgrade, the RADIUS Server is unavailable and authentication fails.